What we collect
From you (the stylist): your name, email, phone, business name, booking page handle, services, hours, and payment information. We hand the card details off to Stripe — we never see your full card number.
From your clients: their name, phone, and email, plus the appointments they book and messages they exchange with you through ChairCal. We get this either from you (when you import your client list) or from them directly (when they book through your chaircal.com page).
Automatically: standard log data when you use the service (IP address, browser type, pages visited). We use this to keep the service running and to debug issues.
How we use it
To run the service: send the texts and emails you tell us to send, show you your schedule, recover your cancellations, charge your subscription. That's it. We do not sell or share (as those terms are defined under the California Consumer Privacy Act) your personal information or your clients' personal information, and we have not done so in the preceding twelve months. We do not share data with advertisers.
Where we operate
ChairCal is intended for stylists and clients in the United States and Canada. We don't market the service to, or knowingly accept signups from, residents of the European Union, the United Kingdom, or other jurisdictions outside the U.S. and Canada. If you live outside our supported regions, please don't use the service.
California residents have additional rights under the California Consumer Privacy Act (CCPA) — including the right to know what we collect, to delete it, and to confirm we don't sell or share it. To exercise any of those rights, email support@chaircal.com.
Who we share it with (service providers)
To run the service, we use a small set of trusted vendors who process data on our behalf:
- Twilio — sends and receives SMS on your behalf.
- Stripe — handles your subscription billing.
- Convex — hosts your data and runs the application backend.
- Cloudflare — delivers our website and routes inbound email replies.
Each of these is contractually required to use your data only to provide their service. We don't share your data with anyone else.
How long we keep it
As long as your account is active, we keep your data so the service works. If you cancel, we keep your data for 90 days in case you reactivate, then delete it. You can ask us to delete it sooner — email support@chaircal.com and we'll do it within 30 days.
Your rights
Wherever you live, you have the right to:
- See what data we have about you (just ask — or export from your dashboard).
- Correct anything that's wrong.
- Delete your data (we'll do it within 30 days of request).
- Take it with you (we provide CSV export of your client list and appointments).
To exercise any of these, email support@chaircal.com. Region-specific rights (e.g. California's CCPA) are covered in the "Where we operate" section above.
Your clients' rights
When a client texts STOP to one of your messages, we remove them from your blast list immediately and won't send them another text. If a client emails us asking for their data to be deleted, we'll route the request to you (you're the data controller for your client list); we'll help you fulfill it.
Cookies
We use a session cookie to keep you signed in. We don't use third-party tracking cookies, ad pixels, or cross-site behavioral analytics.
Product analytics
We record a defined set of product events — sign-up, page-section views (dashboard, inbox, schedule, billing), and business actions (booking created, blast sent, client added) — and attribute them to your account when you're signed in. Marketing-page visits before signup are recorded anonymously (no account attached) so we can understand how stylists find us.
We use this data to debug issues, decide what to build next, and measure whether the service is delivering its promised outcomes for stylists. We do not sell it, share it with advertisers, or use it to enrich third-party profiles. Events stay inside ChairCal and are tied to your user ID, never to your name, email, or your clients' data. See §8 of the Terms of Service for the identical commitments on the contract side.
Data security
All data is encrypted in transit (TLS) and at rest. We follow industry-standard practices for access control and incident response. If we ever experience a breach affecting your data, we'll notify you within 72 hours.
Children
ChairCal is not intended for anyone under 18. We don't knowingly collect data from minors. If you think a minor's data is in our system by accident, email us and we'll remove it.
Changes to this policy
If we materially change this policy, we'll email you and post a notice at the top of this page. Continued use of the service after a change means you accept the new policy.
Who runs ChairCal
ChairCal is operated by Peter Lewis as a sole-proprietor business doing business as ChairCal ("we," "us," or "ChairCal"). When this policy refers to ChairCal, that's the legal entity you're dealing with.
Contact
Questions about privacy? Email support@chaircal.com.